Addresses low-priority CVE-2010-4341: DoS in sssd PAM responder can prevent logins

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a local denial-of-service attack that stops other users from logging in. The bug existed in the pam_parse_in_data_v2() function. (CVE-2010-4341: CVSS v2 Base Score: 2.1)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0443 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 9.2. It addresses 11 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2018-16838, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0076 advisory.

    This advisory aggregates security fixes for the sssd SRPM in CIQ LTS 8.6. It addresses 9 CVEs:
    CVE-2010-4341, CVE-2010-2940, CVE-2012-3462, CVE-2011-1758, CVE-2023-3758, and 4 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0560 advisory.

    The System Security Services Daemon (SSSD) provides a set of daemons to     manage access to remote directories and authentication mechanisms. It     provides an NSS and PAM interface toward the system and a pluggable     back-end system to connect to multiple different account sources. It is     also the basis to provide client auditing and policy services for projects     such as FreeIPA.

    A flaw was found in the SSSD PAM responder that could allow a local     attacker to crash SSSD via a carefully-crafted packet. With SSSD     unresponsive, legitimate users could be denied the ability to log in to the     system. (CVE-2010-4341)

    Red Hat would like to thank Sebastian Krahmer for reporting this issue.

    This update also fixes several bugs and adds various enhancements.
    Documentation for these bug fixes and enhancements will be available     shortly from the Technical Notes document, linked to in the References     section.

    Users of SSSD should upgrade to these updated packages, which upgrade SSSD     to upstream version 1.5.1 to correct this issue, and fix the bugs and add     the enhancements noted in the Technical Notes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
51651	Fedora 13 : sssd-1.3.0-40.fc13 (2011-0337)	Nessus	Fedora Local Security Checks	2011/1/24	2021/1/11	low
51655	Fedora 14 : sssd-1.5.0-2.fc14 (2011-0364)	Nessus	Fedora Local Security Checks	2011/1/24	2021/1/11	low
75573	openSUSE Security Update : libcollection-devel (openSUSE-SU-2011:0058-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	low
355472	Rocky Linux 9.2 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0443)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
357983	Rocky Linux 8.6 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc Multiple Vulnerabilities (ciqsa-2026_0076)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high
54594	RHEL 6 : sssd (RHSA-2011:0560)	Nessus	Red Hat Local Security Checks	2011/5/20	2025/3/24	medium

偵測

搜尋 Plugin

low

low

low

high

high

medium